Advisory PSIRT Engineer

Lenovo; Farnborough; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Holiday purchase

Private medical

Life insurance

Cycle to work

Learning and development

Referral bonus

Job summary

Lenovo in Farnborough, United Kingdom seeks an experienced Product Security Advisory Engineer within the Enterprise Product Security Incident Response Team (E-PSIRT) to coordinate vulnerability management across Lenovo’s global product portfolio.

You will lead cross-functional teams, manage security advisories, and support CRA compliance, vulnerability reporting readiness, and regulatory responses. This role requires strong communication and incident response skills, with occasional travel.

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• 8+ years in cybersecurity, product security, or regulatory roles, in a team-lead capacity.
• Proven capability in security operations, incident response, vulnerability analysis, and/or threat intelligence.
• Exceptional written and verbal communication tailored for technical teams, leadership, and external researchers.
• Willingness to support critical cycles with off-hours and occasional travel for regulatory assessments.

Responsibilities

• Evaluate product security vulnerabilities, exploits, and incidents to determine severity and impact.
• Manage end-to-end lifecycle of vulnerability cases from intake to closure.
• Coordinate cross-functional vulnerability response across security offices, Legal, and business groups.
• Collaborate with suppliers and partners to develop remediation plans and disclosures.
• Publish technical security advisories with fixes, workarounds, and mitigations.
• Assist CRA regulatory reporting and readiness exercises.
• Monitor threat intelligence sources to identify emerging risks.
• Develop metrics and improve triage and governance documentation.

Skills

Cybersecurity experience

Incident response

Threat intelligence

Communication

Education

Bachelor's degree in Cybersecurity or related field

Job description

* United Kingdom - Hampshire - Farnborough

Why Work at Lenovo

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com , and read about the latest news via our StoryHub .

Description and Requirements

TheProduct Security Advisory Engineerwithin Lenovo’sEnterprise Product Security Incident Response Team (E-PSIRT)is the central operational orchestrator for vulnerability management across Lenovo’s global product portfolio. This critical role coordinates product security offices, engineering teams, and suppliers to ensure vulnerabilities are appropriately evaluated, remediated, and disclosed. Additionally, this position plays a pivotal role in supporting Lenovo’sCyber Resilience Act (CRA)compliance, vulnerability reporting readiness, and regulatory response activities.

Key Responsibilities

• Vulnerability Assessment & Triage:Evaluate product security vulnerabilities, exploits, and incidents from external researchers, threat intelligence, public disclosures, and internal testing to determine severity, risk, and business impact.
• PSIRT Case Management:Manage the end-to-end lifecycle of vulnerability cases from initial intake through technical investigation, remediation progress tracking, and final closure.
• Central Operational Orchestration:Coordinate cross-functional vulnerability response efforts across internal product security offices (IDG, ISG, SSG, Motorola, CAIO), Legal, and various business groups.
• Supplier & Partner Liaison:Collaborate and negotiate with third-party upstream and downstream suppliers, technology partners, and security researchers to develop remediation plans and coordinate responsible disclosures.
• Security Advisory Development:Author, review, and publish technical security advisories communicating available fixes, workarounds, and mitigation strategies to customers.
• Cross-Functional Communication:Manage internal and customer-facing messaging to ensure accurate, consistent, and timely communication regarding critical vulnerabilities and product security issues.
• Cyber Resilience Act (CRA) Compliance:Assist with CRA reporting requirements by identifying actively exploited vulnerabilities or severe incidents, preparing regulatory reports, and participating in readiness exercises.
• Threat Intelligence Monitoring:Monitor global vulnerability databases, threat feeds, and third-party notifications to proactively assess emerging risks impacting Lenovo products.
• Metrics & Continuous Improvement:Develop vulnerability management metrics, drive triage automation initiatives, and contribute to the refinement of team playbooks, SOPs, and governance documentation.

Qualifications & Requirements

• Education:Bachelor’s degree inCybersecurity, Information Systems, Systems Engineering, Law, or a highly related technical discipline.
• Experience:8+ years of applied experiencein cybersecurity, software engineering, product security, enterprise risk, or regulatory compliance roles in a team-lead capacity.
• Domain Expertise:Proven capability insecurity operations, incident response, vulnerability analysis, and/or threat intelligence.
• High-Level Communication:Exceptional written and verbal communication skills tailored for technical teams, senior leadership, and external researchers.
• Operational Flexibility:Availability to support critical cycles with occasional off-hours engagement, alongside intermittent travel for regulatory assessments and stakeholder alignment.

Preferred Requirements

• PSIRT Experience:Prior hands-on experience working within an enterprise Product Security Incident Response Team.
• External Ecosystem Engagement:Experience interacting directly with external security researchers, CERTs, regulators, and industry consortiums.
• AI Security Knowledge:Experience handlingAI-related vulnerabilitiesand modern machine learning platform incidents.

What Lenovo Can Offer You:

At Lenovo, we invest in our people and provide a benefits package designed to support your wellbeing, development, and work-life balance, including:

• Holiday purchase
• Private medical
• Income protection
• Positive work life balance
• Learning and development
• Life insurance
• Lenovo and Motorola products discounts
• Cycle to work
• MyGymDiscounts
• Mortgage advice and support
• Referral bonus
• Free onsite parking

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

Additional Locations: * United Kingdom - Hampshire - Farnborough

AI PROCESSING NOTICE

We use AI-based tools to support some of our processes (e.g. online interviews recordings and transcripts) in order to achieve better efficiency, accuracy and for our documentation purposes. AI can make mistakes, but we always make sure that the outputs are manually reviewed by a human. You can always opt-out or contact us in case of any question.

If you require an accommodation to complete this application, please [e-mail]